Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
File:                     ec749261-21d5-3145-9684-d93e7631475d.roa (raw, json)
Hash identifier:          cvwxiZPbX82NCad5lJXwtN23+ravTFbDBrFR0Iq7Lqw=
Subject key identifier:   FA:43:C4:73:36:4E:5E:AF:C4:97:2A:F7:83:05:20:E5:61:0F:B3:1A
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F43285847D999F364937C1F1D455E4300
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     125
IP address blocks:        199.64.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f3:64:93:7c:1f:1d:45:5e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=3174984c-e8d6-47e5-98ca-2328ddec8af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3a:25:74:14:3e:93:f1:79:c2:59:46:85:4b:
                    ab:5b:29:74:30:f4:4b:21:d1:07:20:d5:35:17:4b:
                    fc:04:9d:09:2b:67:51:8c:46:5e:21:54:4d:da:21:
                    33:39:3b:64:03:0d:e6:4e:e2:2e:38:11:23:87:bb:
                    ce:74:e3:5a:61:51:3f:08:c2:e7:85:67:1d:32:5a:
                    29:9b:f2:cf:bc:bd:35:63:5e:85:fe:7b:62:fc:1c:
                    34:35:f1:3e:89:7f:8b:eb:0e:8a:9a:7f:20:dd:15:
                    0e:8b:4e:bb:92:41:97:da:bb:c5:f3:50:9c:25:de:
                    64:f2:fe:be:23:0f:c3:0c:a8:74:9b:25:e7:cd:18:
                    a7:9b:59:b1:ed:05:f8:c7:96:34:50:13:e4:57:75:
                    94:45:52:ea:7c:e8:0e:aa:96:8f:27:46:d2:bc:f5:
                    fe:20:a6:5e:7e:98:54:8a:82:96:a0:76:77:6f:ea:
                    dd:10:0f:36:4c:58:18:53:fc:2c:87:9c:21:a5:2b:
                    36:19:16:c9:ca:a9:a9:7b:8f:c4:88:86:8d:66:9a:
                    d4:62:c4:42:e1:f1:56:68:b5:28:a5:04:a8:69:bb:
                    2c:ee:63:1f:5b:ca:b4:03:44:5b:50:3b:ff:d6:3a:
                    d6:24:79:9f:08:00:4e:89:e7:b8:62:4b:1e:a6:ca:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:C4:73:36:4E:5E:AF:C4:97:2A:F7:83:05:20:E5:61:0F:B3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:49:f4:01:14:52:c2:4d:5a:c5:40:94:e9:52:55:63:45:
         8d:18:ff:68:40:93:3a:b1:5d:54:fb:86:48:0d:5a:3e:12:df:
         56:d1:ed:89:e4:e5:99:3a:dd:c7:c5:72:96:bb:b9:67:f1:13:
         0f:b1:27:f0:30:6b:f5:f7:f0:e0:b8:75:1d:1a:b7:d7:d7:84:
         22:ee:03:fb:50:85:8d:9c:ae:12:c1:76:89:bb:b3:df:45:fc:
         64:da:ed:78:e4:19:5e:c6:a0:20:98:4d:96:79:41:5e:5b:5c:
         0b:c1:01:ae:a3:70:b6:87:8d:82:22:9f:22:b8:c3:b4:19:af:
         5f:bc:da:85:4d:c3:c4:9b:29:f5:63:13:ee:eb:bb:78:bb:12:
         f5:39:9c:64:c2:62:f4:c2:a0:11:6f:97:61:dc:a5:d9:a1:8e:
         86:30:87:e9:59:2f:b9:eb:52:27:53:32:3e:55:38:32:f1:4b:
         8e:ae:9f:7a:36:09:5d:6d:11:8f:14:d7:18:19:d3:87:56:a8:
         2a:21:b4:aa:13:6b:61:a8:62:fa:59:f2:f3:89:30:5a:00:87:
         4d:8f:68:ef:98:43:15:95:91:93:8b:3e:a8:73:55:5c:08:ab:
         cf:fa:1e:c8:7d:e0:ac:b6:a2:9d:07:76:17:ce:62:04:73:6c:
         04:d5:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org